Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Oct. 27, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189491 7.5 危険 adbnewssender - ADbNewsSender における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6046 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
189492 7.5 危険 agaresmedia - Arcadem Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6040 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189493 6.8 警告 bluepage - BLUEPAGE CMS における Web セッションハイジャックの脆弱性 CWE-287
不適切な認証 		CVE-2008-6039 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189494 7.5 危険 availscript - AvailScript Article Script の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6037 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189495 7.5 危険 basebuilder - BaseBuilder の main.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6036 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189496 4.3 警告 Achievo - Achievo の dispatch.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6035 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189497 4.3 警告 Achievo - Achievo の dispatch.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6034 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189498 6.8 警告 buzzywall - BuzzyWall の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6029 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189499 4.3 警告 bluepage - BLUEPAGE CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6027 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
189500 7.5 危険 bluecube - BlueCUBE CMS の tienda.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6026 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Oct. 27, 2024, 8:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 4.4 MEDIUM
Local 		linuxfoundation
rdkcentral
google
openwrt 		yocto
rdk-b
android
openwrt 		In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed… Update CWE-125
Out-of-bounds Read 		CVE-2024-20084 2024-10-27 12:35 2024-09-2 Show GitHub Exploit DB Packet Storm
12 - - - An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php. Update - CVE-2024-34245 2024-10-27 12:35 2024-05-15 Show GitHub Exploit DB Packet Storm
13 - - - Active debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation … Update - CVE-2024-30219 2024-10-27 12:35 2024-04-15 Show GitHub Exploit DB Packet Storm
14 - - - Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injec… Update - CVE-2024-30879 2024-10-27 12:35 2024-04-11 Show GitHub Exploit DB Packet Storm
15 - - - HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell. Update - CVE-2024-21865 2024-10-27 12:35 2024-03-25 Show GitHub Exploit DB Packet Storm
16 - - - A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argum… New CWE-89
SQL Injection 		CVE-2024-10409 2024-10-27 12:15 2024-10-27 Show GitHub Exploit DB Packet Storm
17 - - - A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /abs.php. The manipulation of the argum… New CWE-89
SQL Injection 		CVE-2024-10408 2024-10-27 12:15 2024-10-27 Show GitHub Exploit DB Packet Storm
18 - - - A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file ma… Update - CVE-2024-44157 2024-10-27 11:35 2024-10-12 Show GitHub Exploit DB Packet Storm
19 - - - Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components. Update - CVE-2024-21725 2024-10-27 11:35 2024-02-29 Show GitHub Exploit DB Packet Storm
20 8.8 HIGH
Network 		elecom wrc-2533gs2-b_firmware
wrc-2533gs2-w_firmware
wrc-2533gs2v-b_firmware
wrc-x6000xs-g_firmware
wrc-x1500gs-b_firmware
wrc-x1500gsa-b_firmware 		Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be dir… Update CWE-352
 Origin Validation Error 		CVE-2024-40883 2024-10-27 10:35 2024-08-1 Show GitHub Exploit DB Packet Storm